This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: AXw5793excZeL4fQi6gdKXX/Hx67MwlWgbOjxppZxj8=
Subject key identifier: 68:7B:91:7F:2F:1F:5E:A6:16:A0:92:2A:B9:44:4C:8E:2B:5B:77:50
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019C43905C31659509342B98AD4872078C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0EC7
Signing time: Mon 09 Feb 2026 18:01:00 +0000
Manifest this update: Mon 09 Feb 2026 18:01:00 +0000
Manifest next update: Tue 10 Feb 2026 18:01:00 +0000
Files and hashes: 1: eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa (hash: y5sRxVzTyv3q+thLaOje2bsBoe1cBCrXQcLT//6Uj0k=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: WYqC92ZRkqZasNoFxFnlOZb7WmLHuuB4u6CVbst/tEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:5c:31:65:95:09:34:2b:98:ad:48:72:07:8c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Feb 9 18:01:00 2026 GMT
Not After : Feb 10 18:01:00 2026 GMT
Subject: CN=687b917f2f1f5ea616a0922ab9444c8e2b5b7750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:d4:79:e0:53:be:39:f7:78:68:3b:dd:16:
98:4e:60:f3:88:ab:42:72:8f:46:55:50:84:3d:16:
c8:60:11:47:fc:00:dd:e8:c6:c2:18:9c:66:cc:78:
45:0d:27:2c:a3:a7:8d:d2:1f:5c:ca:eb:ae:da:36:
46:4d:f9:6b:dd:22:63:5b:56:f9:43:e5:d8:1a:92:
c5:26:a7:e5:fc:9d:a1:ac:63:c3:76:3a:3a:73:06:
54:08:5e:ea:dd:95:da:b0:40:b0:56:5a:a3:3f:f6:
51:c1:7f:12:bc:42:1e:9a:2b:3d:df:93:40:b2:99:
09:b9:16:7a:01:35:c9:96:be:21:02:63:b8:07:a7:
f0:67:f3:1e:2a:48:49:a1:fb:24:11:25:f8:74:d4:
9d:8e:b1:b8:08:cc:3f:3f:8d:ce:26:26:4b:80:ff:
9b:83:a2:98:53:0b:b1:4e:ee:d4:62:59:05:71:62:
e7:ff:76:83:bb:88:a4:d1:22:41:e5:ec:9b:05:62:
3e:09:59:7a:0d:e2:fb:03:c0:08:8f:1c:5d:a8:5b:
ca:e4:f9:ff:67:20:5c:1d:66:bf:e7:4c:f0:bf:0b:
c7:e6:e0:17:18:bc:9b:7b:97:88:b9:10:f9:ef:d8:
60:d9:b5:a2:5c:88:c5:b7:bb:10:98:30:02:52:d9:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7B:91:7F:2F:1F:5E:A6:16:A0:92:2A:B9:44:4C:8E:2B:5B:77:50
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c7:af:ab:e4:e1:ba:9d:ff:8e:b8:15:98:7b:11:2a:cc:df:
6f:b9:0e:44:dd:1f:f0:7d:9e:cd:f9:4c:49:5e:6b:b9:39:70:
d6:e7:d1:84:5f:6a:48:df:2f:d7:81:8f:86:a8:7a:25:3d:26:
94:81:a1:07:d6:5c:09:9a:aa:6a:28:de:7c:a3:f4:d6:b4:5c:
04:95:86:e2:2d:5a:f4:74:a3:4e:e8:fb:a7:01:26:f9:48:42:
a1:97:51:fe:4c:be:db:f5:13:23:08:47:78:4e:11:be:bf:66:
dd:31:c6:5f:fc:c5:15:19:91:05:f7:7e:bc:f0:1a:bc:9d:c3:
81:47:82:3f:5d:b5:07:2a:03:bb:0b:0d:0b:91:29:14:41:d5:
63:ce:c4:3b:2c:6c:d7:ee:de:a7:bd:56:ec:95:03:a0:f6:b3:
85:02:ce:3d:15:44:8f:94:03:a5:67:5e:cc:e2:45:65:8a:f4:
be:65:a6:ff:90:3c:66:11:77:1f:3d:0c:b0:2d:e3:91:77:e8:
a5:b2:af:f7:fd:86:79:fd:6a:f7:4d:bd:57:cf:c2:6c:4a:62:
ba:e7:15:89:cc:44:ec:53:1c:95:47:dc:a1:02:c6:1f:3c:85:
b0:6e:41:47:63:1c:30:b2:6c:e6:74:64:fd:4d:11:a9:ed:7f:
40:2a:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:11:14 2026 by rpki-client